WTF PAM???
The poster complained that with PAM enabled on IDS, some client APIs connect fine (ESQL/C, old Intersolv ODBC, ODBC 3.34 from SDK 2.7) while the newer Informix ODBC driver fails because it expects applications to register a PAM "callback function" — impossible in tools like ERWin. An IBM responder explained that if only simple password authentication is used (no challenges), no callback is needed, and the failure is a known ODBC defect (idsdb00036624) with a patch available from Tech Support. The poster lacked CSDK support and his request was cancelled; another reader suggested logging it under I-Connect, which IDS support does cover, to obtain a newer ODBC driver. No confirmed fix is recorded.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
With PAM enabled IDS some programs (api interfaces) are working, other not. Why? Where is backward compatibility? Why ESQL/C works, and odbc driver 3.34 (sdk2.7) works, and intersolv odbc driver (1999 year) works, but new odbc driver 2.9 does not work? New odbc needs implementation of "callback function" in programs. How can we implement "callback function" in ERWin? I understand that PAM give us new identification possibilities and it require "callback function", but for what reason IBM breaks backward compatibility?
Hi Denis, In Informix ODBC 3.34 (SDK 2.7) PAM implementation was not there in ODBC at all. If I understand correctly then you might be using PAM through ODBC only for password authentication (and not actual challenges), am I right? If so, then you have encountered defect in ODBC (defect # idsdb00036624). You can touch base with your Tech Support to get the patch (I believe its already available). You should be able to use ODBC with PAM enabled IDS if the authentication mechanism is simply password (and not the challenges). Thanks -Shesh Denis.Zhuravlov@gmail.com Sent by: informix-list-bounces@iiug.org 08/01/2006 12:18 PM To informix-list@iiug.org cc Subject WTF PAM??? With PAM enabled IDS some programs (api interfaces) are working, other not. Why? Where is backward compatibility? Why ESQL/C works, and odbc driver 3.34 (sdk2.7) works, and intersolv odbc driver (1999 year) works, but new odbc driver 2.9 does not work? New odbc needs implementation of "callback function" in programs. How can we implement "callback function" in ERWin? I understand that PAM give us new identification possibilities and it require "callback function", but for what reason IBM breaks backward compatibility? _______________________________________________ Informix-list mailing list Informix-list@iiug.org http://www.iiug.org/mailman/listinfo/informix-list
> In Informix ODBC 3.34 (SDK 2.7) PAM implementation was not there in ODBC > at all. If I understand correctly then you might be using PAM through ODBC > only for password authentication (and not actual challenges), am I right? Yes. > If so, then you have encountered defect in ODBC (defect # idsdb00036624). > You can touch base with your Tech Support to get the patch (I believe its > already available). You should be able to use ODBC with PAM enabled IDS if > the authentication mechanism is simply password (and not the challenges). Very good. To my sorry I don't have support for ODBC, only for IDS, but I'll try. I was confused by documentation: http://publib.boulder.ibm.com/infocenter/idshelp/v10/index.jsp?topic=/com.ibm.admin.doc/admin222.htm The following client APIs, tools and applications do not support PAM or LDAP Authentication Support modules: * LibC++ * Libdmi * OLEDB * *********VB Applications using ODBC*************** * Ilogin, dbping and ********ODBC Test connection********* * ISA I don't suspect that's defect.
As far as I know your IDS support must also cover entire CSDK (and so the ODBC). Again as long as your authentication is only password through PAM you should be able to use both "ODBC Test Connection" as well as ODBC VB applications. The simple password authentication doesn't require "callback functions" to be registered. Thanks -Shesh Denis.Zhuravlov@gmail.com Sent by: informix-list-bounces@iiug.org 08/01/2006 03:43 PM To informix-list@iiug.org cc Subject Re: WTF PAM??? > In Informix ODBC 3.34 (SDK 2.7) PAM implementation was not there in ODBC > at all. If I understand correctly then you might be using PAM through ODBC > only for password authentication (and not actual challenges), am I right? Yes. > If so, then you have encountered defect in ODBC (defect # idsdb00036624). > You can touch base with your Tech Support to get the patch (I believe its > already available). You should be able to use ODBC with PAM enabled IDS if > the authentication mechanism is simply password (and not the challenges). Very good. To my sorry I don't have support for ODBC, only for IDS, but I'll try. I was confused by documentation: http://publib.boulder.ibm.com/infocenter/idshelp/v10/index.jsp?topic=/com.ibm.admin.doc/admin222.htm The following client APIs, tools and applications do not support PAM or LDAP Authentication Support modules: * LibC++ * Libdmi * OLEDB * *********VB Applications using ODBC*************** * Ilogin, dbping and ********ODBC Test connection********* * ISA I don't suspect that's defect. _______________________________________________ Informix-list mailing list Informix-list@iiug.org http://www.iiug.org/mailman/listinfo/informix-list
> I'll try. Unsuccessful try, request canceled. :(
Shesh, the IDS support does not cover CSDK support. CSDK support, if needed, is purchased sperately. Denis The IDS support does cover I-Connect and to get the ODBC driver you need I-Connect, not CSDK You should be able to log an I-Connect issue under the IDS support contract and get newer ODBC versions from the I-Connect pacth rather than the CSDK patch Sheshnarayan Agrawal wrote: > As far as I know your IDS support must also cover entire CSDK (and so the > ODBC). Again as long as your authentication is only password through PAM > you should be able to use both "ODBC Test Connection" as well as ODBC VB > applications. The simple password authentication doesn't require "callback > functions" to be registered. > > Thanks > -Shesh > > > > > Denis.Zhuravlov@gmail.com > Sent by: informix-list-bounces@iiug.org > 08/01/2006 03:43 PM > > To > informix-list@iiug.org > cc > > Subject > Re: WTF PAM??? > > > > > > > > In Informix ODBC 3.34 (SDK 2.7) PAM implementation was not there in ODBC > > at all. If I understand correctly then you might be using PAM through > ODBC > > only for password authentication (and not actual challenges), am I > right? > Yes. > > > If so, then you have encountered defect in ODBC (defect # > idsdb00036624). > > You can touch base with your Tech Support to get the patch (I believe > its > > already available). You should be able to use ODBC with PAM enabled IDS > if > > the authentication mechanism is simply password (and not the > challenges). > Very good. To my sorry I don't have support for ODBC, only for IDS, but > I'll try. > I was confused by documentation: > http://publib.boulder.ibm.com/infocenter/idshelp/v10/index.jsp?topic=/com.ibm.admin.doc/admin222.htm > > The following client APIs, tools and applications do not support PAM or > LDAP Authentication Support modules: > * LibC++ > * Libdmi > * OLEDB > * *********VB Applications using ODBC*************** > * Ilogin, dbping and ********ODBC Test connection********* > * ISA > I don't suspect that's defect. > > _______________________________________________ > Informix-list mailing list > Informix-list@iiug.org > http://www.iiug.org/mailman/listinfo/informix-list > > > --=_alternative 003E9D38652571BD_= > Content-Type: text/html > X-Google-AttachSize: 2676 > > > <br><font size=2 face="sans-serif">As far as I know your IDS support must > also cover entire CSDK (and so the ODBC). Again as long as your authentication > is only password through PAM you should be able to use both "ODBC > Test Connection" as well as ODBC VB applications. The simple password > authentication doesn't require "callback functions" to be registered.</font> > <br> > <br><font size=2 face="sans-serif">Thanks<br> > -Shesh<br> > </font> > <br> > <br> > <br> > <table width=100%> > <tr valign=top> > <td width=40%><font size=1 face="sans-serif"><b>Denis.Zhuravlov@gmail.com</b> > </font> > <br><font size=1 face="sans-serif">Sent by: informix-list-bounces@iiug.org</font> > <p><font size=1 face="sans-serif">08/01/2006 03:43 PM</font> > <td width=59%> > <table width=100%> > <tr valign=top> > <td> > <div align=right><font size=1 face="sans-serif">To</font></div> > <td><font size=1 face="sans-serif">informix-list@iiug.org</font> > <tr valign=top> > <td> > <div align=right><font size=1 face="sans-serif">cc</font></div> > <td> > <tr valign=top> > <td> > <div align=right><font size=1 face="sans-serif">Subject</font></div> > <td><font size=1 face="sans-serif">Re: WTF PAM???</font></table> > <br> > <table> > <tr valign=top> > <td> > <td></table> > <br></table> > <br> > <br> > <br><tt><font size=2>> In Informix ODBC 3.34 (SDK 2.7) PAM implementation > was not there in ODBC<br> > > at all. If I understand correctly then you might be using PAM through > ODBC<br> > > only for password authentication (and not actual challenges), am I > right?<br> > Yes.<br> > <br> > > If so, then you have encountered defect in ODBC (defect # idsdb00036624).<br> > > You can touch base with your Tech Support to get the patch (I believe > its<br> > > already available). You should be able to use ODBC with PAM enabled > IDS if<br> > > the authentication mechanism is simply password (and not the challenges).<br> > Very good. To my sorry I don't have support for ODBC, only for IDS, but<br> > I'll try.<br> > I was confused by documentation:<br> > http://publib.boulder.ibm.com/infocenter/idshelp/v10/index.jsp?topic=/com.ibm.admin.doc/admin222.htm<br>; > The following client APIs, tools and applications do not support PAM or<br> > LDAP Authentication Support modules:<br> > * LibC++<br> > * Libdmi<br> > * OLEDB<br> > * *********VB Applications using ODBC***************<br> > * Ilogin, dbping and ********ODBC Test connection*********<br> > * ISA<br> > I don't suspect that's defect.<br> > <br> > _______________________________________________<br> > Informix-list mailing list<br> > Informix-list@iiug.org<br> > http://www.iiug.org/mailman/listinfo/informix-list<br>; > </font></tt> > <br> > --=_alternative 003E9D38652571BD_=--